Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11acec04-8d82-3fa0-b03f-f3aab6a00307.roa
File: 11acec04-8d82-3fa0-b03f-f3aab6a00307.roa (raw, json)
Hash identifier: ZyZGuaUOZt9JfIAkYA2sN+zNgUwmh6QyVaBvfFXPoU8=
Subject key identifier: 0A:C3:E7:A5:61:67:24:F4:15:BC:63:3D:14:BB:F3:ED:BE:4E:94:F6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A282E621402898EC790C8A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11acec04-8d82-3fa0-b03f-f3aab6a00307.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.240.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:28:2e:62:14:02:89:8e:c7:90:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=74495f18-7774-4f98-a1ce-2abaa372bb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:61:bc:b6:1d:8e:15:35:8c:5b:7b:e2:fd:
57:fc:51:04:4c:b2:a3:2c:ff:f0:e2:4c:4a:1e:0d:
c8:90:fd:2d:2b:ed:a6:0f:56:05:7c:5e:7e:18:4f:
7a:05:54:0e:49:61:1a:dd:48:e6:3a:1f:dc:4e:c5:
8c:be:1a:ea:88:f7:dc:0a:fa:a0:a2:c3:9c:0f:34:
e1:80:d7:20:52:b4:6d:8e:fa:0b:6f:05:5b:08:9a:
c9:17:ff:15:a2:1a:1a:54:e2:56:00:8c:50:75:30:
30:6d:81:95:42:16:62:e7:25:fe:c4:09:29:0c:75:
17:7d:1a:d8:b7:00:12:93:06:8d:98:37:2e:0d:79:
a6:f3:8e:e5:71:0c:84:c7:2a:ad:9a:68:93:c7:24:
8a:6c:ed:49:1d:1a:36:2b:1c:17:db:ff:4f:93:43:
89:65:19:c8:67:32:40:d3:84:26:13:d2:3a:c7:da:
fc:23:dd:28:5f:b3:88:f6:94:c1:fa:f2:f0:84:0c:
e4:de:39:f7:d9:76:c6:e3:d5:46:0e:a8:6a:24:9e:
72:9c:23:f3:7a:17:78:f1:fa:4f:a1:47:a9:67:1d:
30:79:6c:ef:42:86:df:95:91:97:50:e7:c7:57:72:
89:10:8f:41:a9:42:53:68:46:19:d0:f8:1e:a3:23:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C3:E7:A5:61:67:24:F4:15:BC:63:3D:14:BB:F3:ED:BE:4E:94:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11acec04-8d82-3fa0-b03f-f3aab6a00307.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.240.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:28:0e:f0:63:2f:29:1d:9b:16:93:61:50:94:6a:2f:83:96:
55:70:f2:ec:a9:94:59:f9:6f:92:20:c5:a2:4c:57:67:f1:de:
04:d0:8f:6c:56:cc:e6:84:1e:cf:fd:a1:95:e0:a0:f1:52:93:
1c:06:05:ea:78:3b:bf:0e:d8:9e:90:38:4b:b6:35:b5:4d:cf:
c6:f4:8d:6d:81:42:65:cf:6e:9a:22:9a:0e:03:d2:dc:d0:5d:
25:f9:e1:1d:f3:2f:83:1c:33:2c:99:a5:f5:3c:35:ca:38:ee:
19:c5:1b:8d:54:f2:8b:6e:25:b3:39:dd:3c:a4:9c:38:31:d4:
b0:67:71:6d:f4:1b:68:70:af:d2:f7:67:bd:e5:b6:ca:e7:9c:
b8:bd:5d:d4:ca:6e:2c:5e:63:78:89:3f:1c:49:a2:b4:fd:7f:
3e:07:8e:93:95:e0:e5:8f:eb:5e:9f:db:bd:ab:a8:e1:21:a4:
b2:97:5d:42:90:53:87:2b:bc:dc:fc:e7:8e:4e:17:fe:cf:42:
be:b0:de:c5:ef:73:09:d6:50:9b:b7:95:68:f6:99:23:2a:88:
ce:7e:db:05:ee:56:ba:8e:a0:77:ce:d3:a0:7e:92:e4:f3:f2:
3c:4f:fd:d9:f2:e1:aa:a7:9a:de:43:95:f2:ed:1b:b4:d3:0f:
7b:ba:26:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKKC5iFAKJjseQyKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NzQ0OTVmMTgtNzc3NC00Zjk4LWExY2UtMmFiYWEzNzJiYjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnlhvLYdjhU1jFt74v1X/FEETLKjLP/w4kxK
Hg3IkP0tK+2mD1YFfF5+GE96BVQOSWEa3UjmOh/cTsWMvhrqiPfcCvqgosOcDzTh
gNcgUrRtjvoLbwVbCJrJF/8VohoaVOJWAIxQdTAwbYGVQhZi5yX+xAkpDHUXfRrY
twASkwaNmDcuDXmm847lcQyExyqtmmiTxySKbO1JHRo2KxwX2/9Pk0OJZRnIZzJA
04QmE9I6x9r8I90oX7OI9pTB+vLwhAzk3jn32XbG49VGDqhqJJ5ynCPzehd48fpP
oUepZx0weWzvQobflZGXUOfHV3KJEI9BqUJTaEYZ0PgeoyMoJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArD56VhZyT0FbxjPRS78+2+TpT2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTFhY2VjMDQtOGQ4Mi0z
ZmEwLWIwM2YtZjNhYWI2YTAwMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/AgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAoDvBjLykdmxaTYVCUai+DllVw8uyplFn5b5IgxaJMV2fx3gTQj2xW
zOaEHs/9oZXgoPFSkxwGBep4O78O2J6QOEu2NbVNz8b0jW2BQmXPbpoimg4D0tzQ
XSX54R3zL4McMyyZpfU8Nco47hnFG41U8otuJbM53TyknDgx1LBncW30G2hwr9L3
Z73ltsrnnLi9XdTKbixeY3iJPxxJorT9fz4HjpOV4OWP616f272rqOEhpLKXXUKQ
U4crvNz8545OF/7PQr6w3sXvcwnWUJu3lWj2mSMqiM5+2wXuVrqOoHfO06B+kuTz
8jxP/dny4aqnmt5DlfLtG7TTD3u6Jj8=
-----END CERTIFICATE-----
Generated at Sat May 10 14:47:35 2025 by rpki-client